Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

CVE-2004-0392

Quick assessment

Affected
n/a n/a
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

racoon是KAME的IKE守护程序。 KAME Racoon在处理畸形IKE消息时存在问题，远程攻击者可以利用这个漏洞对守护程序进行拒绝服务攻击。 在IKE协议中，有"Security Association Next Payload"的特殊字段保留和另一个由工作组标记的'RESERVED'字段。当客户端使用'Agressive' KEY交换方法，插入伪造信息到这些字段(独立或一前一后)，Racoon服务器就会即刻进入无限循环，丢弃所有存在连接，消耗大量系统资源而产生拒绝服务。

AI Predicted 5.3 Difficulty: Easy EPSS 2.49% · P84

Possible ATT&CK Techniques 1 AI

T1499 · Endpoint Denial of Service
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2004-0392

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: CVE Program / CVE List V5
Vulnerability Description
racoon before 20040407b allows remote attackers to cause a denial of service (infinite loop and dropped connections) via an IKE message with a malformed Generic Payload Header containing invalid (1) "Security Association Next Payload" and (2) "RESERVED" fields.
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5
Vulnerability Title
KAME Racoon远程IKE消息远程拒绝服务漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
racoon是KAME的IKE守护程序。 KAME Racoon在处理畸形IKE消息时存在问题，远程攻击者可以利用这个漏洞对守护程序进行拒绝服务攻击。 在IKE协议中，有"Security Association Next Payload"的特殊字段保留和另一个由工作组标记的'RESERVED'字段。当客户端使用'Agressive' KEY交换方法，插入伪造信息到这些字段(独立或一前一后)，Racoon服务器就会即刻进入无限循环，丢弃所有存在连接，消耗大量系统资源而产生拒绝服务。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

Vendor Product Affected Versions CPE Subscribe
- n/a n/a -

II. Public POCs for CVE-2004-0392

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2004-0392

请登录查看更多情报信息。

Vendor Advisories for CVE-2004-0392 (1)

Other References for CVE-2004-0392 (3)

Same Patch Batch · n/a · 2004-05-06 · 6 CVEs total

CVE-2004-0050 Verity Ultraseek错误信息路径公开漏洞
CVE-2004-0422 Emacs flim库以不安全方式创建临时文件漏洞
CVE-2004-0430 Apple Mac OS X AppleFileServer预验证远程缓冲区溢出漏洞
CVE-2004-0431 Apple QuickTime Sample-to-Chunk远程整数溢出漏洞
CVE-2004-0437 Titan文件传输服务器漏洞

IV. Related Vulnerabilities

Same product: n/a
Same vendor: n/a

V. Comments for CVE-2004-0392

No comments yet

Leave a comment